CVE-2022-24627

Summary: CVE-2022-24627 affects AudioCodes Device Manager Express (versions up to 7.8.20002.47752). It is an unauthenticated SQL injection in the parameter p of the login form process_login.php. The underlying cause is improper input handling, enabling attackers to bypass authentication and poten...

CVE-2022-24632

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during file download via the BrowseFiles.php view parameter...

CVE-2022-24632

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during file download via the BrowseFiles.php view parameter...

PT-2023-3689 · Hitachi · Hitachi Device Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Device Manager versions prior to 8.8.5-02 Description: The issue is related to the cleartext transmission of sensitive information in Hitachi Device Manager, affecting components such as Device Manager Server, Device Manager Agent, an...

PT-2023-3688 · Hitachi · Hitachi Device Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Device Manager versions prior to 8.8.5-02 Description: The issue is related to improper validation of certificates with host mismatch in Hitachi Device Manager, which can allow a Man in the Middle Attack. This can be exploited by a...

Amazon Fire TV Stick 安全漏洞

The Amazon Fire TV Stick is a TV voice recognition remote control from Amazon.com, Inc. A security vulnerability exists in the Amazon Fire TV Stick that stems from improper workflow execution of the exchangeDeviceServices function of the amzn.dmgr service...

HP Device Manager Security Updates

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges. HP has released HP Device Manager 5.0.10, which includes updates to mitigate these potential vulnerabilities. All the identified vulnerabilities listed previously...

Device Manager Express 7.8.20002.47752 SQL Injection / XSS / Code Execution / Traversal

Device Manager Express versions 7.8.20002.47752 and below suffer from code execution, command execution, cross site scripting, remote SQL injection, and traversal vulnerabilities. Product Name: Device Manager Express Vendor Homepage: https://www.audiocodes.com Software Link:...

AudioCodes Device Manager Express SQL注入漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A SQL injection vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which originates from an...

AudioCodes Device Manager Express SQL注入漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP Phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A SQL injection vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from an...

AudioCodes Device Manager Express 命令注入漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP Phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A command injection vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from remot...

AudioCodes Device Manager Express 跨站脚本漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP Phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A cross-site scripting vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which originates fr...

AudioCodes Device Manager Express 路径遍历漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A path traversal vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from a path...

Device Manager Express 7.8.20002.47752 SQL Injection / XSS / Code Execution / Traversal

Product Name: Device Manager Express Vendor Homepage: https://www.audiocodes.com Software Link: https://www.audiocodes.com/solutions-products/products/management-products-solutions/device-manager Version: = 7.8.20002.47752 Tested on: Windows 10 / Server 2019 Default credentials: admin/admin...

K71712132: BIG-IQ vulnerability CVE-2019-6653

Security Advisory Description Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ system. The attack can be stored by users granted the Device Manager and Administrator roles. CVE-2019-6653 Impact The attacker can exploit this vulnerability to access the sensitive data f...

PT-2023-9790 · Visteon · Visteon Infotainment System

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment System affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of the Visteon Infotainment system. Authentication is not required to...

CVE-2022-41339

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

CVE-2022-41339

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

Privilege escalation

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

CVE-2022-41339

The vulnerability CVE-2022-41339 affects Zoho ManageEngine Mobile Device Manager Plus (prior to version 10.1.2207.5). In the User Administration module, a privilege-escalation flaw exists that could allow a user with low privileges to gain higher access (impacting confidentiality, integrity, and ...